News for hackers. Stuff that matters.

A comment on Any sufficiently advanced uninstaller is indistinguishable from malware. Parent comment

Re:Any sufficiently advanced uninstaller is indistinguishabl... by Arainach on Wednesday September 13, 2023 @03:48PM (#37500888)
There is never a good reason to inject code into another process - particularly a system process. At the point at which you believe this is necessary you are several layers of hackiness deep and should go find a beverage and think over what your actual goal is.

As a metaphor: you find the instructions to sweep your floor cumbersome so you reprogram your neighbor's Roomba to come clean your floor. Sure, it may well go back to their house and no harm done, but it's hacky, socially unacceptable, and no matter how hard your broom is to use it's not OK.

[ Parent | on HN ]
Re:Any sufficiently advanced uninstaller is indistinguishabl... by sim7c00 on Wednesday September 20, 2023 @01:54PM (#37587395)
security products have valid reasons, though maybe not _good_. forcing plt and got entries to be bound rather than lazy loaded, forcing certain segments to be read only and hooking a bunch of stuff is neccesary for them, and that can only be done by suspending processes at startup and then injecting and modifying them. its a bandaid to a bad system hence its a valid but maybe not good reason (better to prevent than this cure of theirs..)
[ Parent | on HN ]